PT-2016-3585 · Linux+3 · Linux Kernel+3

Asbjoern Sloth Toennesen · Published 2015-01-30 · Updated 2018-01-05 · CVE-2015-1573

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18.5

Description The issue is related to the interaction between cross-chain jumps and ruleset flushes in the Linux kernel, specifically in the nft flush table function. This can be exploited by local users with the CAP NET ADMIN capability to cause a denial of service, resulting in a system panic.

Recommendations For Linux kernel versions prior to 3.18.5, update to version 3.18.5 or later to resolve the issue.

Exploit

Fix

DoS

Weakness Enumeration

CWE-19

Related Identifiers

ALT-PU-2015-1118

ALT-PU-2015-1794

CESA-2015_1137

CVE-2015-1573

RHSA-2015:1137

RHSA-2015:1138

RHSA-2015:1139

RHSA-2015_1137

RHSA-2015_1139

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

References · 21

• 🔥 https://github.com/retme7/CVE-2014-4322_poc · Exploit
• 🔥 https://github.com/panyu6325/CVE-2015-1805 · Exploit
• 🔥 https://github.com/laginimaineb/cve-2014-4322 · Exploit
• 🔥 https://github.com/marcograss/cve-2014-4323 · Exploit
• 🔥 https://github.com/FloatingGuy/cve-2015-1805 · Exploit
• 🔥 https://github.com/ireshchaminda1/Android-Privilege-Escalation-Remote-Access-Vulnerability-CVE-2015-1805 · Exploit
• https://github.com/torvalds/linux/commit/a2f18db0c68fec96631c10cad9384c196e9008ac · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1573 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-1137.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1573 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-1137.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-1573 · Security Note
• http://rhn.redhat.com/errata/RHSA-2015-1138.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1573 · Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a2f18db0c68fec96631c10cad9384c196e9008ac · Vendor Advisory